CVE - CVE-2009-1833

CVE-ID
CVE-2009-1833	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-24.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=369696 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=426520 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=427196 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=487204 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=503570 DEBIAN:DSA-1820 URL:http://www.debian.org/security/2009/dsa-1820 FEDORA:FEDORA-2009-6366 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html FEDORA:FEDORA-2009-6411 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html MANDRIVA:MDVSA-2009:141 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 REDHAT:RHSA-2009:1095 URL:https://rhn.redhat.com/errata/RHSA-2009-1095.html REDHAT:RHSA-2009:1096 URL:http://rhn.redhat.com/errata/RHSA-2009-1096.html REDHAT:RHSA-2009:1125 URL:http://www.redhat.com/support/errata/RHSA-2009-1125.html REDHAT:RHSA-2009:1126 URL:http://www.redhat.com/support/errata/RHSA-2009-1126.html SLACKWARE:SSA:2009-167-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 SLACKWARE:SSA:2009-176-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 SLACKWARE:SSA:2009-178-01 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 SUNALERT:265068 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 SUNALERT:1020800 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 UBUNTU:USN-782-1 URL:http://www.ubuntu.com/usn/usn-782-1 BID:35326 URL:http://www.securityfocus.com/bid/35326 BID:35372 URL:http://www.securityfocus.com/bid/35372 OSVDB:55152 URL:http://osvdb.org/55152 OSVDB:55153 URL:http://osvdb.org/55153 OSVDB:55154 URL:http://osvdb.org/55154 OVAL:oval:org.mitre.oval:def:11487 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11487 SECTRACK:1022376 URL:http://securitytracker.com/id?1022376 SECTRACK:1022397 URL:http://www.securitytracker.com/id?1022397 SECUNIA:35331 URL:http://secunia.com/advisories/35331 SECUNIA:35428 URL:http://secunia.com/advisories/35428 SECUNIA:35431 URL:http://secunia.com/advisories/35431 SECUNIA:35439 URL:http://secunia.com/advisories/35439 SECUNIA:35440 URL:http://secunia.com/advisories/35440 SECUNIA:35468 URL:http://secunia.com/advisories/35468 SECUNIA:35536 URL:http://secunia.com/advisories/35536 SECUNIA:35415 URL:http://secunia.com/advisories/35415 SECUNIA:35561 URL:http://secunia.com/advisories/35561 SECUNIA:35602 URL:http://secunia.com/advisories/35602 VUPEN:ADV-2009-1572 URL:http://www.vupen.com/english/advisories/2009/1572 VUPEN:ADV-2009-2152 URL:http://www.vupen.com/english/advisories/2009/2152
Assigning CNA
N/A
Date Entry Created
20090529	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090529)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.